Cyber security and risk management are starting to climb and stick to the management agenda.